Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.mft
File:                     8CO5dwgZb_nyC8kofVbELKrlFA8.mft (raw, json)
Hash identifier:          iyCkpg6MB5Azxg3G5Y8cNEczA/9RzxcoR0vQyEe+OSY=
Subject key identifier:   F7:67:09:2F:B9:84:73:DE:2D:63:99:12:9C:22:B1:C9:70:24:8B:41
Authority key identifier: F0:23:B9:77:08:19:6F:F9:F2:0B:C9:28:7D:56:C4:2C:AA:E5:14:0F
Certificate issuer:       /CN=F36C11E4AF/serialNumber=F023B97708196FF9F20BC9287D56C42CAAE5140F
Certificate serial:       03E6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8CO5dwgZb_nyC8kofVbELKrlFA8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.mft
Manifest number:          03D9
Signing time:             Sun 21 Jun 2026 03:50:09 +0000
Manifest this update:     Sun 21 Jun 2026 03:50:08 +0000
Manifest next update:     Tue 23 Jun 2026 03:50:08 +0000
Files and hashes:         1: 8CO5dwgZb_nyC8kofVbELKrlFA8.crl (hash: oxzQn064Qz/9xpcDJJKs3Kc/2tdx80MFxtt7iXuTlxA=)
                          2: E426B5CC979D11F096A760E0DAE4EC9C.roa (hash: Qu1bT2FOjPIO4pS4cjspkc4hPfnA5gSZp8GQU69NlgU=)
                          3: C59D974E977D11F0B8898995DAE4EC9C.roa (hash: 9sQYBw+BJR4l43uVbgekzScfJJnTJXulZoG2Q7RECiE=)
                          4: F7859C76D43511F08FA009DFDAE4EC9C.roa (hash: t58rkAW+tki8gdKysYBKMUhjxgpa2MMuVeZqcgJgAb4=)
                          5: B8CC164AD43511F08A5377DEDAE4EC9C.roa (hash: NBitB2nQFOfV9ys3SiMTOmjXMmCIcDc7sWeKdyJpeo8=)
                          6: 35870488D43611F08728FBE0DAE4EC9C.roa (hash: Rm/s93U7Kp3F1Riav5LiVCWaFcWiqPFSK5/3AkP+uUI=)
                          7: 0EF6C094979E11F0A1367EE0DAE4EC9C.roa (hash: rudQgiGZO9W2N58KhjAh5JgOESyQ2q7XBM+cgROdak8=)
                          8: DB8FF5EC8FCB11F0AB6B7CC3DAE4EC9C.roa (hash: MWBh8j3tbpFo+evponTu0mS8C9DNHC3IYuWTwyyHOBg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8CO5dwgZb_nyC8kofVbELKrlFA8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 998 (0x3e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C11E4AF, serialNumber=F023B97708196FF9F20BC9287D56C42CAAE5140F
        Validity
            Not Before: Jun 21 03:50:08 2026 GMT
            Not After : Jun 23 03:50:08 2026 GMT
        Subject: CN=6a375f71-e38d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:de:d1:4d:d1:af:25:41:2b:5d:95:83:4c:5a:
                    4f:e7:00:fc:01:7d:e6:74:9d:9e:66:6c:a0:a1:87:
                    24:67:2d:6f:bf:c9:6a:bf:d4:3b:5b:a6:b2:94:cc:
                    74:12:43:cb:56:ff:b1:fe:f6:92:cd:6a:24:7c:09:
                    b5:a7:92:91:8e:1e:6f:0d:38:59:07:4e:34:81:3a:
                    5e:03:c0:52:b3:6f:c2:b8:1b:ce:3c:dc:85:5a:f1:
                    87:7d:06:10:d6:8f:e7:4f:3c:0a:49:2d:60:de:e4:
                    58:17:2a:79:46:df:99:ed:1f:f9:42:27:87:4c:b2:
                    3c:fd:e1:eb:8d:b2:cd:6f:bc:70:37:3a:99:ef:42:
                    ef:79:fa:29:16:1e:3c:5f:bc:0e:81:a9:34:da:c9:
                    11:d7:9a:bd:7e:07:e3:bb:20:e8:c0:85:40:7e:b7:
                    87:b7:d0:82:5a:09:9e:85:4c:ac:54:3c:7b:b4:2c:
                    81:86:7c:6d:66:b0:14:7e:07:71:5f:91:84:a7:39:
                    2e:ef:7a:41:2d:25:95:7e:0f:0d:c3:b2:e4:fd:98:
                    ce:96:b3:45:f3:57:88:33:d9:59:43:b1:d9:95:23:
                    68:a7:20:ef:66:a1:8e:93:5c:4d:97:cb:31:f3:49:
                    41:70:5b:2d:5f:f0:b8:82:4c:1a:43:be:49:af:e8:
                    5c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:67:09:2F:B9:84:73:DE:2D:63:99:12:9C:22:B1:C9:70:24:8B:41
            X509v3 Authority Key Identifier:
                keyid:F0:23:B9:77:08:19:6F:F9:F2:0B:C9:28:7D:56:C4:2C:AA:E5:14:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8CO5dwgZb_nyC8kofVbELKrlFA8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:91:e0:d3:f8:df:c8:b1:f3:01:57:15:5e:a3:91:29:c9:33:
         30:a2:78:6a:62:a5:36:64:58:f3:3b:34:ca:43:6e:2a:a6:0a:
         2d:89:18:05:6c:2a:03:ee:b7:fb:9f:1a:db:a9:0d:41:c4:b1:
         65:5b:04:22:07:0c:a9:42:e9:be:3f:49:5c:dc:b0:9d:e4:34:
         ab:9e:a7:4f:72:ce:4a:2e:19:07:ef:a7:17:96:5e:4b:88:29:
         51:30:74:d8:74:c8:3f:b5:22:4c:ea:9d:09:94:6e:55:ff:c3:
         40:f9:9e:07:fd:e0:96:4f:cf:12:11:5e:df:2f:32:45:e5:b5:
         4b:c7:35:0d:8e:0c:00:04:81:d5:78:4e:1e:3d:70:fd:da:b3:
         5e:f4:ad:b4:82:3e:81:f6:0e:64:d2:de:d5:9d:72:d4:15:ac:
         bf:68:69:7a:58:f8:e2:8f:21:d1:df:36:8a:d6:00:4f:b6:82:
         0a:ff:88:c0:fc:6a:1a:89:cf:72:84:fc:74:d6:d5:ca:28:0c:
         98:a1:30:b6:55:b6:e5:48:7a:8d:e5:01:6c:3b:cf:27:14:a9:
         5d:50:55:25:54:35:71:dd:a3:d5:d5:dc:6b:f0:c9:d5:83:e8:
         dd:21:4c:21:01:33:2a:2e:61:60:78:4d:26:82:57:1c:7c:45:
         fd:75:e6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:43:36 2026 by rpki-client